[USN-6087-1] Ruby vulnerabilities
Severity
Medium
Affected Packages
13
CVEs
2
Several security issues were fixed in Ruby.
It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-28755)
It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possily use this issue to cause a denial of service.
This issue only affected Ubuntu 16.04 ESM. (CVE-2023-28756)
Package | Affected Version |
---|---|
![]() |
< 2.7.0-5ubuntu1.11 |
![]() |
< 2.7.0-5ubuntu1.11 |
![]() |
< 2.7.0-5ubuntu1.11 |
![]() |
< 2.5.1-1ubuntu1.16 |
![]() |
< 2.5.1-1ubuntu1.16 |
![]() |
< 2.5.1-1ubuntu1.16 |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 |
![]() |
< 2.7.0-5ubuntu1.11 |
![]() |
< 2.5.1-1ubuntu1.16 |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 |
- ID
- USN-6087-1
- Severity
- medium
- Severity from
- CVE-2023-28755
- URL
- https://ubuntu.com/security/notices/USN-6087-1
- Published
-
2023-05-18T09:35:29
(15 months ago) - Modified
-
2023-05-18T09:35:29
(15 months ago) - Other Advisories
-
-
ALAS2-2023-2084
-
ALPINE:CVE-2023-28755
-
ALPINE:CVE-2023-28756
-
ALSA-2023:3821
-
ALSA-2023:7025
-
ALSA-2024:1431
-
ALSA-2024:1576
-
ALSA-2024:3500
-
ALSA-2024:3838
-
ELSA-2023-3821
-
ELSA-2023-7025
-
ELSA-2024-1431
-
ELSA-2024-1576
-
ELSA-2024-3500
-
ELSA-2024-3838
-
FEDORA-2023-6b924d3b75
-
FEDORA-2023-a7be7ea1aa
-
FEDORA-2023-f58d72c700
-
FEDORA-2024-31cac8b8ec
-
FEDORA-2024-48bdd3abbf
-
FREEBSD:6BD2773C-CF1A-11ED-BD44-080027F5FEC9
-
FREEBSD:9B60BBA1-CF18-11ED-BD44-080027F5FEC9
-
GLSA-202401-27
-
RHSA-2023:3821
-
RHSA-2023:7025
-
RHSA-2024:1431
-
RHSA-2024:1576
-
RHSA-2024:3500
-
RHSA-2024:3838
-
RUBYSEC:TIME-2023-28756
-
RUBYSEC:URI-2023-28755
-
RUBYSEC:URI-2023-36617
-
SSA:2023-090-01
-
SUSE-SU-2023:4176-1
-
USN-6055-1
-
USN-6055-2
-
USN-6181-1
-
USN-6219-1
-
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/ruby2.7?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.11 | focal | ||
Affected | pkg:deb/ubuntu/ruby2.7-doc?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.11 | focal | ||
Affected | pkg:deb/ubuntu/ruby2.7-dev?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.11 | focal | ||
Affected | pkg:deb/ubuntu/ruby2.5?distro=bionic | ubuntu |
![]() |
< 2.5.1-1ubuntu1.16 | bionic | ||
Affected | pkg:deb/ubuntu/ruby2.5-doc?distro=bionic | ubuntu |
![]() |
< 2.5.1-1ubuntu1.16 | bionic | ||
Affected | pkg:deb/ubuntu/ruby2.5-dev?distro=bionic | ubuntu |
![]() |
< 2.5.1-1ubuntu1.16 | bionic | ||
Affected | pkg:deb/ubuntu/ruby2.3?distro=xenial | ubuntu |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 | xenial | ||
Affected | pkg:deb/ubuntu/ruby2.3-tcltk?distro=xenial | ubuntu |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 | xenial | ||
Affected | pkg:deb/ubuntu/ruby2.3-doc?distro=xenial | ubuntu |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 | xenial | ||
Affected | pkg:deb/ubuntu/ruby2.3-dev?distro=xenial | ubuntu |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 | xenial | ||
Affected | pkg:deb/ubuntu/libruby2.7?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.11 | focal | ||
Affected | pkg:deb/ubuntu/libruby2.5?distro=bionic | ubuntu |
![]() |
< 2.5.1-1ubuntu1.16 | bionic | ||
Affected | pkg:deb/ubuntu/libruby2.3?distro=xenial | ubuntu |
![]() |
< 2.3.1-2~ubuntu16.04.16+esm7 | xenial |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |